@intx/hub-sessions 0.3.0 → 0.4.0

package/dist/skill-kind.js

@@ -1,7 +1,6 @@
 import { type } from "arktype";
 import { getLogger } from "@intx/log";
-import { glob, repoActionToGrantVerb } from "@intx/hub-common";
-import { UserPrincipal, } from "./repo-store/index.js";
+import { authorizeUserPrincipal, } from "./repo-store/index.js";
 const logger = getLogger(["hub-sessions", "skill-kind"]);
 /**
  * arktype schema for the SKILL.md frontmatter. Required fields are
@@ -220,66 +219,13 @@ export const skillAuthorize = (principal, repoId, ref, action) => {
         }
     }
     if (principal.kind === "user") {
-        // The route layer has already pre-resolved the grant verdict and
-        // attached it as `authz`. The substrate does NOT re-query the
-        // grant store here; it (a) checks the bearer-token's claims
-        // bound the requested (ref, action) and have not expired, and
-        // (b) sanity-checks that the pre-resolved verdict targets this
-        // exact resource and grant verb. Both gates must pass before the
-        // verdict's `effect` is honoured.
-        const parsed = UserPrincipal(principal);
-        if (parsed instanceof type.errors) {
-            return {
-                allowed: false,
-                reason: `user principal is malformed: ${parsed.summary}`,
-            };
-        }
-        if (!parsed.tokenClaims.actions.includes(action)) {
-            return {
-                allowed: false,
-                reason: `token does not grant action ${action}`,
-            };
-        }
-        // `ref === "*"` is the substrate's sentinel for a bulk read used
-        // by `listRefs`. The advertise-refs layer applies the per-ref
-        // refPattern filter on the listing it returns, so gating the bulk
-        // read on refPattern here would prevent any token with a
-        // narrow-pattern (e.g. `refs/heads/main`) from listing refs at
-        // all. Only the action and expiry are enforced for the bulk read;
-        // every other call site passes a concrete ref and is gated below.
-        if (ref !== "*" && !glob.match(parsed.tokenClaims.refPattern, ref)) {
-            return {
-                allowed: false,
-                reason: `token refPattern ${parsed.tokenClaims.refPattern} does not match ${ref}`,
-            };
-        }
-        if (Date.now() >= parsed.tokenClaims.expiresAt) {
-            return {
-                allowed: false,
-                reason: `token expired at ${parsed.tokenClaims.expiresAt}`,
-            };
-        }
-        const expectedResource = `asset:${repoId.id}`;
-        if (parsed.authz.resource !== expectedResource) {
-            return {
-                allowed: false,
-                reason: `authz verdict resource ${parsed.authz.resource} does not match ${expectedResource}`,
-            };
-        }
-        const expectedGrantVerb = repoActionToGrantVerb(action);
-        if (parsed.authz.grantVerb !== expectedGrantVerb) {
-            return {
-                allowed: false,
-                reason: `authz verdict grantVerb ${parsed.authz.grantVerb} does not match ${expectedGrantVerb}`,
-            };
-        }
-        if (parsed.authz.effect === "allow") {
-            return { allowed: true };
-        }
-        return {
-            allowed: false,
-            reason: `authz verdict denied for ${expectedResource} ${expectedGrantVerb}`,
-        };
+        return authorizeUserPrincipal({
+            principal,
+            repoId,
+            ref,
+            action,
+            resourcePrefix: "asset",
+        });
     }
     // Fail closed on any kind not handled above. The tenant-level
     // `workflow` principal kind (`@intx/types` principalKinds) is a

package/dist/substrate.d.ts

@@ -1,4 +1,4 @@
-export { DEFAULT_CONSUMED_RETENTION_MS, dequeueToProcessing, enqueueInbox, markConsumed, parseEventSeq, readOwnedMessageIds, readCommittedWorkflowRunLifecycle, readWorkflowRunLifecycle, readProcessingEntry, replayProcessingToInbox, requireEventSeq, StaleInboxEnqueueError, WORKFLOW_RUN_AGENT_STATE_PREFIX, WORKFLOW_RUN_EVENTS_DIR, WORKFLOW_RUN_RUNS_PREFIX, } from "./workflow-run-kind.js";
+export { classifyTerminalEvent, DEFAULT_CONSUMED_RETENTION_MS, dequeueToProcessing, enqueueInbox, markConsumed, parseEventSeq, scanRunsForBoot, readCommittedWorkflowRunLifecycle, readWorkflowRunLifecycle, readProcessingEntry, replayProcessingToInbox, requireEventSeq, StaleInboxEnqueueError, WORKFLOW_RUN_AGENT_STATE_PREFIX, WORKFLOW_RUN_PARTS_DIR, WORKFLOW_RUN_EVENTS_DIR, WORKFLOW_RUN_RUNS_PREFIX, MAX_MAIL_PART_PATH_COMPONENT_BYTES, } from "./workflow-run-kind.js";
 export type { WorkflowRunSupervisorPrincipal, WorkflowRunWorkflowProcessPrincipal, DequeueToProcessingResult, EnqueueAlreadyPresentReason, EnqueueInboxArgs, EnqueueInboxOutcome, EnqueueInboxResult, MarkConsumedArgs, MarkConsumedResult, WorkflowRunLifecycle, ReplayProcessingToInboxOpts, ReplayProcessingToInboxResult, } from "./workflow-run-kind.js";
 export { encodeCombinedEventLog, splitCombinedEventLog, WORKFLOW_RUN_EVENTS_FILE, } from "./workflow-run-event-log.js";
 export { workflowDefinitionEnvelopeSchema } from "./workflow-kind.js";

package/dist/substrate.js

@@ -14,7 +14,7 @@
 // runs nowhere near a database -- can import it without dragging `@intx/db`
 // into its boot graph. Every symbol re-exported here is defined in a db-free
 // module. The barrel still re-exports all of these for hub-side consumers.
-export { DEFAULT_CONSUMED_RETENTION_MS, dequeueToProcessing, enqueueInbox, markConsumed, parseEventSeq, readOwnedMessageIds, readCommittedWorkflowRunLifecycle, readWorkflowRunLifecycle, readProcessingEntry, replayProcessingToInbox, requireEventSeq, StaleInboxEnqueueError, WORKFLOW_RUN_AGENT_STATE_PREFIX, WORKFLOW_RUN_EVENTS_DIR, WORKFLOW_RUN_RUNS_PREFIX, } from "./workflow-run-kind.js";
+export { classifyTerminalEvent, DEFAULT_CONSUMED_RETENTION_MS, dequeueToProcessing, enqueueInbox, markConsumed, parseEventSeq, scanRunsForBoot, readCommittedWorkflowRunLifecycle, readWorkflowRunLifecycle, readProcessingEntry, replayProcessingToInbox, requireEventSeq, StaleInboxEnqueueError, WORKFLOW_RUN_AGENT_STATE_PREFIX, WORKFLOW_RUN_PARTS_DIR, WORKFLOW_RUN_EVENTS_DIR, WORKFLOW_RUN_RUNS_PREFIX, MAX_MAIL_PART_PATH_COMPONENT_BYTES, } from "./workflow-run-kind.js";
 export { encodeCombinedEventLog, splitCombinedEventLog, WORKFLOW_RUN_EVENTS_FILE, } from "./workflow-run-event-log.js";
 export { workflowDefinitionEnvelopeSchema } from "./workflow-kind.js";
 export { subscribeKind } from "./repo-store/subscribe-kind.js";

package/dist/workflow-allocation-service.d.ts

@@ -1,16 +1,17 @@
 import { type DB, type SidecarAllocation } from "@intx/db";
-import { type CredentialCipher, type SidecarPlacementRequirement } from "@intx/types";
+import { SidecarCapabilityRule, type CredentialCipher } from "@intx/types";
 import type { ToolPackagePin } from "@intx/types/tool-packages";
 import type { WorkflowDefinitionSource } from "@intx/types/workflow-sources";
 import type { DeployContent } from "./agent-repo.js";
 import { type SidecarPluginRegistry } from "./sidecar-allocation/index.js";
 import { type DeployWorkflowDefinitionResult, type PreparedWorkflowDeployer } from "./session-service.js";
 import type { SidecarAllocationRouter } from "./ws/sidecar-handler.js";
-export declare class ExclusiveWorkflowPlacementError extends Error {
+import { type SidecarReconciliationContext } from "./sidecar-allocation/operation.js";
+export declare class WorkflowProvisioningError extends Error {
     readonly code: string;
     constructor(code: string, message: string);
 }
-export type PrepareExclusiveWorkflowDeploymentArgs = {
+export type PrepareProvisionedWorkflowDeploymentArgs = {
     readonly tenantId: string;
     readonly anchorRunId: string;
     readonly deploymentDomain: string;
@@ -24,9 +25,6 @@ export type PrepareExclusiveWorkflowDeploymentArgs = {
      */
     readonly pin?: string;
     readonly definitionAssetId: string;
-    readonly placement: SidecarPlacementRequirement & {
-        readonly sharing: "exclusive";
-    };
     readonly sessionId: string;
     readonly sourceAuthorityPrincipalId: string;
     readonly sourceOfferingIds: readonly string[];
@@ -34,25 +32,33 @@ export type PrepareExclusiveWorkflowDeploymentArgs = {
     readonly deployContent: DeployContent;
     readonly toolPackagePins?: readonly ToolPackagePin[];
 };
-export type PreparedExclusiveWorkflowDeployment = {
+export type PreparedProvisionedWorkflowDeployment = {
     readonly anchorRunId: string;
     readonly deploymentAddress: string;
     readonly allocationId: string;
     readonly status: "pending";
 };
 export type WorkflowAllocationService = {
-    prepareExclusiveDeployment(args: PrepareExclusiveWorkflowDeploymentArgs): Promise<PreparedExclusiveWorkflowDeployment>;
-    deployReadyAllocation(allocation: SidecarAllocation): Promise<DeployWorkflowDefinitionResult | null>;
+    initialize?(): Promise<void>;
+    reconcileReleasingProbes?(): Promise<void>;
+    prepareProvisionedDeployment(args: PrepareProvisionedWorkflowDeploymentArgs): Promise<PreparedProvisionedWorkflowDeployment>;
+    deployReadyAllocation(allocation: SidecarAllocation, reconciliation: SidecarReconciliationContext): Promise<DeployWorkflowDefinitionResult | null>;
 };
 export type WorkflowAllocationServiceDeps = {
     readonly db: DB["db"];
-    readonly plugins: SidecarPluginRegistry;
+    readonly deploymentPlugins: SidecarPluginRegistry;
+    readonly probePlugins: SidecarPluginRegistry;
     readonly preparedDeployer: PreparedWorkflowDeployer;
-    readonly credentialCipher?: CredentialCipher;
-    readonly allocationRouter: Pick<SidecarAllocationRouter, "isAllocatedWorkflowActive">;
+    /** Decrypts tenant-owned credential bindings for provisioned deployments. */
+    readonly credentialCipher: CredentialCipher;
+    readonly probeCapabilityRules?: readonly SidecarCapabilityRule[];
+    readonly allocationRouter: Pick<SidecarAllocationRouter, "disconnectAllocation" | "fenceAllocation" | "isAllocatedWorkflowActive" | "retireAllocation" | "sendProbeToAllocation" | "waitForAllocatedSidecar">;
+    readonly hubWebSocketUrl: string;
     readonly createAllocationId?: () => string;
+    readonly createSidecarId?: () => string;
+    readonly createToken?: () => string;
+    readonly connectTimeoutMs?: number;
+    readonly operationTimeoutMs?: number;
     readonly now?: () => Date;
 };
-/** Resolve the tenant-inherited sidecar placement into one launch decision. */
-export declare function resolveWorkflowSidecarPlacement(db: DB["db"], tenantId: string): Promise<SidecarPlacementRequirement | null>;
-export declare function createWorkflowAllocationService({ db, plugins, preparedDeployer, credentialCipher, allocationRouter, createAllocationId, now, }: WorkflowAllocationServiceDeps): WorkflowAllocationService;
+export declare function createWorkflowAllocationService({ db, deploymentPlugins, probePlugins, preparedDeployer, credentialCipher, probeCapabilityRules, allocationRouter, hubWebSocketUrl, createAllocationId, createSidecarId, createToken, connectTimeoutMs, operationTimeoutMs, now, }: WorkflowAllocationServiceDeps): WorkflowAllocationService;