@intx/hub-sessions 0.2.2 → 0.4.0

package/dist/skill-kind.js

@@ -1,7 +1,6 @@
 import { type } from "arktype";
 import { getLogger } from "@intx/log";
-import { glob, repoActionToGrantVerb } from "@intx/hub-common";
-import { UserPrincipal, } from "./repo-store/index.js";
+import { authorizeUserPrincipal, } from "./repo-store/index.js";
 const logger = getLogger(["hub-sessions", "skill-kind"]);
 /**
  * arktype schema for the SKILL.md frontmatter. Required fields are
@@ -220,67 +219,18 @@ export const skillAuthorize = (principal, repoId, ref, action) => {
         }
     }
     if (principal.kind === "user") {
-        // The route layer has already pre-resolved the grant verdict and
-        // attached it as `authz`. The substrate does NOT re-query the
-        // grant store here; it (a) checks the bearer-token's claims
-        // bound the requested (ref, action) and have not expired, and
-        // (b) sanity-checks that the pre-resolved verdict targets this
-        // exact resource and grant verb. Both gates must pass before the
-        // verdict's `effect` is honoured.
-        const parsed = UserPrincipal(principal);
-        if (parsed instanceof type.errors) {
-            return {
-                allowed: false,
-                reason: `user principal is malformed: ${parsed.summary}`,
-            };
-        }
-        if (!parsed.tokenClaims.actions.includes(action)) {
-            return {
-                allowed: false,
-                reason: `token does not grant action ${action}`,
-            };
-        }
-        // `ref === "*"` is the substrate's sentinel for a bulk read used
-        // by `listRefs`. The advertise-refs layer applies the per-ref
-        // refPattern filter on the listing it returns, so gating the bulk
-        // read on refPattern here would prevent any token with a
-        // narrow-pattern (e.g. `refs/heads/main`) from listing refs at
-        // all. Only the action and expiry are enforced for the bulk read;
-        // every other call site passes a concrete ref and is gated below.
-        if (ref !== "*" && !glob.match(parsed.tokenClaims.refPattern, ref)) {
-            return {
-                allowed: false,
-                reason: `token refPattern ${parsed.tokenClaims.refPattern} does not match ${ref}`,
-            };
-        }
-        if (Date.now() >= parsed.tokenClaims.expiresAt) {
-            return {
-                allowed: false,
-                reason: `token expired at ${parsed.tokenClaims.expiresAt}`,
-            };
-        }
-        const expectedResource = `asset:${repoId.id}`;
-        if (parsed.authz.resource !== expectedResource) {
-            return {
-                allowed: false,
-                reason: `authz verdict resource ${parsed.authz.resource} does not match ${expectedResource}`,
-            };
-        }
-        const expectedGrantVerb = repoActionToGrantVerb(action);
-        if (parsed.authz.grantVerb !== expectedGrantVerb) {
-            return {
-                allowed: false,
-                reason: `authz verdict grantVerb ${parsed.authz.grantVerb} does not match ${expectedGrantVerb}`,
-            };
-        }
-        if (parsed.authz.effect === "allow") {
-            return { allowed: true };
-        }
-        return {
-            allowed: false,
-            reason: `authz verdict denied for ${expectedResource} ${expectedGrantVerb}`,
-        };
+        return authorizeUserPrincipal({
+            principal,
+            repoId,
+            ref,
+            action,
+            resourcePrefix: "asset",
+        });
     }
+    // Fail closed on any kind not handled above. The tenant-level
+    // `workflow` principal kind (`@intx/types` principalKinds) is a
+    // grant owner, not a skill bearer, and never carries a skill repo
+    // push here -- so it is intentionally left denied.
     return {
         allowed: false,
         reason: `unknown principal kind: ${principal.kind}`,

package/dist/substrate.d.ts

@@ -1,8 +1,8 @@
-export { DEFAULT_CONSUMED_RETENTION_MS, dequeueToProcessing, enqueueInbox, markConsumed, readOwnedMessageIds, readProcessingEntry, replayProcessingToInbox, WORKFLOW_RUN_AGENT_STATE_PREFIX, } from "./workflow-run-kind.js";
-export type { WorkflowRunSupervisorPrincipal, WorkflowRunWorkflowProcessPrincipal, DequeueToProcessingResult, EnqueueInboxArgs, EnqueueInboxResult, MarkConsumedArgs, MarkConsumedResult, ReplayProcessingToInboxOpts, ReplayProcessingToInboxResult, } from "./workflow-run-kind.js";
+export { classifyTerminalEvent, DEFAULT_CONSUMED_RETENTION_MS, dequeueToProcessing, enqueueInbox, markConsumed, parseEventSeq, scanRunsForBoot, readCommittedWorkflowRunLifecycle, readWorkflowRunLifecycle, readProcessingEntry, replayProcessingToInbox, requireEventSeq, StaleInboxEnqueueError, WORKFLOW_RUN_AGENT_STATE_PREFIX, WORKFLOW_RUN_PARTS_DIR, WORKFLOW_RUN_EVENTS_DIR, WORKFLOW_RUN_RUNS_PREFIX, MAX_MAIL_PART_PATH_COMPONENT_BYTES, } from "./workflow-run-kind.js";
+export type { WorkflowRunSupervisorPrincipal, WorkflowRunWorkflowProcessPrincipal, DequeueToProcessingResult, EnqueueAlreadyPresentReason, EnqueueInboxArgs, EnqueueInboxOutcome, EnqueueInboxResult, MarkConsumedArgs, MarkConsumedResult, WorkflowRunLifecycle, ReplayProcessingToInboxOpts, ReplayProcessingToInboxResult, } from "./workflow-run-kind.js";
 export { encodeCombinedEventLog, splitCombinedEventLog, WORKFLOW_RUN_EVENTS_FILE, } from "./workflow-run-event-log.js";
 export { workflowDefinitionEnvelopeSchema } from "./workflow-kind.js";
 export { subscribeKind } from "./repo-store/subscribe-kind.js";
 export type { SubscribeKindEntry } from "./repo-store/subscribe-kind.js";
 export { createAgentRepoStore } from "./agent-repo.js";
-export type { Principal, RepoId, RepoStore, WriteResult, InitRepoOpts, NewlyTerminalRun, } from "./repo-store/types.js";
+export type { CommittedReads, CommittedTreeEntry, Principal, RepoId, RepoStore, WriteResult, InitRepoOpts, NewlyTerminalRun, } from "./repo-store/types.js";

package/dist/substrate.js

@@ -14,7 +14,7 @@
 // runs nowhere near a database -- can import it without dragging `@intx/db`
 // into its boot graph. Every symbol re-exported here is defined in a db-free
 // module. The barrel still re-exports all of these for hub-side consumers.
-export { DEFAULT_CONSUMED_RETENTION_MS, dequeueToProcessing, enqueueInbox, markConsumed, readOwnedMessageIds, readProcessingEntry, replayProcessingToInbox, WORKFLOW_RUN_AGENT_STATE_PREFIX, } from "./workflow-run-kind.js";
+export { classifyTerminalEvent, DEFAULT_CONSUMED_RETENTION_MS, dequeueToProcessing, enqueueInbox, markConsumed, parseEventSeq, scanRunsForBoot, readCommittedWorkflowRunLifecycle, readWorkflowRunLifecycle, readProcessingEntry, replayProcessingToInbox, requireEventSeq, StaleInboxEnqueueError, WORKFLOW_RUN_AGENT_STATE_PREFIX, WORKFLOW_RUN_PARTS_DIR, WORKFLOW_RUN_EVENTS_DIR, WORKFLOW_RUN_RUNS_PREFIX, MAX_MAIL_PART_PATH_COMPONENT_BYTES, } from "./workflow-run-kind.js";
 export { encodeCombinedEventLog, splitCombinedEventLog, WORKFLOW_RUN_EVENTS_FILE, } from "./workflow-run-event-log.js";
 export { workflowDefinitionEnvelopeSchema } from "./workflow-kind.js";
 export { subscribeKind } from "./repo-store/subscribe-kind.js";

package/dist/workflow-allocation-service.d.ts

@@ -0,0 +1,64 @@
+import { type DB, type SidecarAllocation } from "@intx/db";
+import { SidecarCapabilityRule, type CredentialCipher } from "@intx/types";
+import type { ToolPackagePin } from "@intx/types/tool-packages";
+import type { WorkflowDefinitionSource } from "@intx/types/workflow-sources";
+import type { DeployContent } from "./agent-repo.js";
+import { type SidecarPluginRegistry } from "./sidecar-allocation/index.js";
+import { type DeployWorkflowDefinitionResult, type PreparedWorkflowDeployer } from "./session-service.js";
+import type { SidecarAllocationRouter } from "./ws/sidecar-handler.js";
+import { type SidecarReconciliationContext } from "./sidecar-allocation/operation.js";
+export declare class WorkflowProvisioningError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export type PrepareProvisionedWorkflowDeploymentArgs = {
+    readonly tenantId: string;
+    readonly anchorRunId: string;
+    readonly deploymentDomain: string;
+    /** Where the definition's bytes come from at probe time. */
+    readonly source: WorkflowDefinitionSource;
+    /** The `interchange.workflow` entry-module path the sidecar evaluates. */
+    readonly entry: string;
+    /**
+     * A `name@range` spec for the definition package. REQUIRED for the `registry`
+     * and asset-`tarball` variants; omitted for the asset-`source` variant.
+     */
+    readonly pin?: string;
+    readonly definitionAssetId: string;
+    readonly sessionId: string;
+    readonly sourceAuthorityPrincipalId: string;
+    readonly sourceOfferingIds: readonly string[];
+    readonly defaultSourceOfferingId: string;
+    readonly deployContent: DeployContent;
+    readonly toolPackagePins?: readonly ToolPackagePin[];
+};
+export type PreparedProvisionedWorkflowDeployment = {
+    readonly anchorRunId: string;
+    readonly deploymentAddress: string;
+    readonly allocationId: string;
+    readonly status: "pending";
+};
+export type WorkflowAllocationService = {
+    initialize?(): Promise<void>;
+    reconcileReleasingProbes?(): Promise<void>;
+    prepareProvisionedDeployment(args: PrepareProvisionedWorkflowDeploymentArgs): Promise<PreparedProvisionedWorkflowDeployment>;
+    deployReadyAllocation(allocation: SidecarAllocation, reconciliation: SidecarReconciliationContext): Promise<DeployWorkflowDefinitionResult | null>;
+};
+export type WorkflowAllocationServiceDeps = {
+    readonly db: DB["db"];
+    readonly deploymentPlugins: SidecarPluginRegistry;
+    readonly probePlugins: SidecarPluginRegistry;
+    readonly preparedDeployer: PreparedWorkflowDeployer;
+    /** Decrypts tenant-owned credential bindings for provisioned deployments. */
+    readonly credentialCipher: CredentialCipher;
+    readonly probeCapabilityRules?: readonly SidecarCapabilityRule[];
+    readonly allocationRouter: Pick<SidecarAllocationRouter, "disconnectAllocation" | "fenceAllocation" | "isAllocatedWorkflowActive" | "retireAllocation" | "sendProbeToAllocation" | "waitForAllocatedSidecar">;
+    readonly hubWebSocketUrl: string;
+    readonly createAllocationId?: () => string;
+    readonly createSidecarId?: () => string;
+    readonly createToken?: () => string;
+    readonly connectTimeoutMs?: number;
+    readonly operationTimeoutMs?: number;
+    readonly now?: () => Date;
+};
+export declare function createWorkflowAllocationService({ db, deploymentPlugins, probePlugins, preparedDeployer, credentialCipher, probeCapabilityRules, allocationRouter, hubWebSocketUrl, createAllocationId, createSidecarId, createToken, connectTimeoutMs, operationTimeoutMs, now, }: WorkflowAllocationServiceDeps): WorkflowAllocationService;