@kanyun-ai-infra/agenthub 1.3.0 → 1.4.0

package/dist/index.cjs

@@ -2227,6 +2227,24 @@ var AgentOptionsSchema = import_zod4.z.object({
   /** Tool denylist — additive to the platform denylist; cannot remove guards. */
   disallowedTools: import_zod4.z.array(AgentOptionsToolRuleSchema).max(AGENT_OPTIONS_TOOL_LIST_MAX_LENGTH).optional()
 }).strict();
+var WorkloadManifestMemorySchema = import_zod4.z.object({
+  /**
+   * 是否为这个 agent 启用跨会话记忆。缺省 = 启用：manifest 无 `memory` 块时
+   * `resolveAgentMemoryEnabled` 返回 true；只有显式 `enabled: false` 才关。
+   */
+  enabled: import_zod4.z.boolean(),
+  /**
+   * 业务对象维度的记忆（`room` 作用域）从会话 metadata 的哪个键取。
+   *
+   * 目前只接受 `metadata.memoryRoomId` 这一个字面量 —— 把它写出来是为了让接入
+   * 方在 profile 里**看得见**这个约定（此前它只是一个没有产品面的隐式 metadata
+   * 键），而不是为了支持自定义键名：换键名会让写回侧与召回侧对不上。
+   *
+   * 省略 = 不启用 room 维度，只有 user（操作者偏好）与 agent（领域知识）两个
+   * 作用域生效。
+   */
+  roomIdFrom: import_zod4.z.literal("metadata.memoryRoomId").optional()
+}).strict();
 var ManagedAgentProfileSnapshotSchema = import_zod4.z.object({
   model: WorkloadManifestModelSchema.optional(),
   systemPrompt: WorkloadManifestSystemPromptSchema.optional(),
@@ -2240,6 +2258,12 @@ var ManagedAgentProfileSnapshotSchema = import_zod4.z.object({
   agentPackage: AgentPackageSchema.optional(),
   /** Frozen custom LLM provider ref — see `WorkloadManifestDefaultsSchema`. */
   llmProviderRef: LlmProviderConfigPublicIdSchema.optional(),
+  /**
+   * Per-agent managed-memory gate (#1662 E1 / #1827): frozen per revision.
+   * Absent = enabled by default; `enabled: false` disables recall, injection,
+   * and extraction for this agent. Shape: `WorkloadManifestMemorySchema`.
+   */
+  memory: WorkloadManifestMemorySchema.optional(),
   /**
    * 冻结的托管 MCP 绑定清单（issue #1490 / #1493 层①）。
    *
@@ -2413,7 +2437,16 @@ var WorkloadManifestDefaultsSchema = import_zod4.z.object({
    * `sessions.metadata[SESSION_METADATA_LLM_PROVIDER_CONFIG_KEY]`.
    * See `pilot-v2-llm-provider-config.ts`.
    */
-  llmProviderRef: LlmProviderConfigPublicIdSchema.optional()
+  llmProviderRef: LlmProviderConfigPublicIdSchema.optional(),
+  /**
+   * Workload-level per-agent memory gate (#1662 E1 / #1827).
+   *
+   * Absent = enabled by default; `enabled: false` disables recall, injection,
+   * and extraction for this agent. Frozen into the revision snapshot
+   * (`ManagedAgentProfileSnapshotSchema.memory`) so each published revision
+   * carries its own immutable gate decision. Shape: `WorkloadManifestMemorySchema`.
+   */
+  memory: WorkloadManifestMemorySchema.optional()
 }).strict().superRefine(assertMcpBindingFieldsExclusive);
 var WORKLOAD_MANIFEST_UI_DISPLAY_NAME_MAX_LENGTH = 255;
 var WORKLOAD_MANIFEST_UI_PROMPT_PLACEHOLDER_MAX_LENGTH = 500;
@@ -3217,6 +3250,8 @@ var MEMORY_WRITE_OUTCOMES = [
   "promoted",
   /** 命中 `user_deleted` 墓碑：整条不写。删除是终态承诺，直写通道也撤不动。 */
   "suppressed",
+  /** agent 作用域被该 workload 的 manifest 声明为 `memory.enabled: false` 而拒绝。 */
+  "agent_disabled",
   /** 其它拒绝，见 `reason`。 */
   "rejected"
 ];
@@ -3246,6 +3281,8 @@ var WriteMemoriesResultSchema = import_zod26.z.object({
     strengthened: import_zod26.z.number().int().min(0),
     promoted: import_zod26.z.number().int().min(0),
     suppressed: import_zod26.z.number().int().min(0),
+    /** agent 作用域条目被 per-agent 闸（#1827）挡下的条数。 */
+    agent_disabled: import_zod26.z.number().int().min(0),
     rejected: import_zod26.z.number().int().min(0)
   }).strict()
 }).strict();
@@ -5380,6 +5417,9 @@ var WorkspaceExportErrorCodeSchema = import_zod49.z.enum([
   // 500 — fallthrough (e.g. the OSS client could not sign)
   "INTERNAL_ERROR"
 ]);
+var SESSION_ARTIFACT_MAX_BUNDLE_COMPRESSED_BYTES = 8 * 1024 * 1024;
+var SESSION_ARTIFACT_MAX_ENTRY_BYTES = 8 * 1024 * 1024;
+var SESSION_ARTIFACT_MAX_TOTAL_UNCOMPRESSED_BYTES = 16 * 1024 * 1024;
 var ScheduleTargetKindSchema = import_zod50.z.enum(["workload", "agent", "inline_v1", "inline_v2"]);
 var ScheduleApiVersionPreferenceSchema = import_zod50.z.enum(["v1", "v2"]);
 var ScheduleLifecycleStatusSchema = import_zod50.z.enum(["active", "disabled", "deleted"]);
@@ -6448,24 +6488,7 @@ function validateXExtensionValueShape(value) {
   }
   return "x-* value must be a scalar or a one-level object of scalars";
 }
-var ManagedAgentProfileV1MemorySchema = import_zod52.z.object({
-  /**
-   * 是否为这个 agent 启用跨会话记忆。缺省 = 不启用：记忆会跨会话、在多人共用的
-   * 作用域里流动，属于要显式选择的能力，不该因为升级平台版本而自动获得。
-   */
-  enabled: import_zod52.z.boolean(),
-  /**
-   * 业务对象维度的记忆（`room` 作用域）从会话 metadata 的哪个键取。
-   *
-   * 目前只接受 `metadata.memoryRoomId` 这一个字面量 —— 把它写出来是为了让接入
-   * 方在 profile 里**看得见**这个约定（此前它只是一个没有产品面的隐式 metadata
-   * 键），而不是为了支持自定义键名：换键名会让写回侧与召回侧对不上。
-   *
-   * 省略 = 不启用 room 维度，只有 user（操作者偏好）与 agent（领域知识）两个
-   * 作用域生效。
-   */
-  roomIdFrom: import_zod52.z.literal("metadata.memoryRoomId").optional()
-}).strict();
+var ManagedAgentProfileV1MemorySchema = WorkloadManifestMemorySchema;
 var ManagedAgentProfileV1SpecSchema = import_zod52.z.object({
   runtime: ManagedAgentProfileV1RuntimeSchema,
   model: ManagedAgentProfileV1ModelSchema.optional(),
@@ -8558,6 +8581,7 @@ var PilotPlatformApiError = class extends Error {
     this.status = options.status;
     this.code = options.code;
     this.requestId = options.requestId;
+    this.body = options.body;
   }
 };
 var PilotPlatformUnauthenticatedError = class extends PilotPlatformApiError {
@@ -8588,7 +8612,7 @@ function pilotPlatformErrorFromResponse(params) {
   const parsed = extractErrorBody(params.body);
   const code = parsed.code ?? defaultCodeForStatus(params.status);
   const message = parsed.message ?? parsed.error;
-  const base = { code, message, requestId: params.requestId };
+  const base = { code, message, requestId: params.requestId, body: parsed.raw };
   if (params.status === 401) return new PilotPlatformUnauthenticatedError(base);
   if (params.status === 403) return new PilotPlatformForbiddenError(base);
   if (params.status === 404) return new PilotPlatformNotFoundError(base);
@@ -8598,12 +8622,13 @@ function pilotPlatformErrorFromResponse(params) {
   return new PilotPlatformApiError({ ...base, status: params.status });
 }
 function extractErrorBody(body) {
-  if (!body || typeof body !== "object") return {};
+  if (!body || typeof body !== "object" || Array.isArray(body)) return {};
   const record = body;
   return {
     error: typeof record.error === "string" ? record.error : void 0,
     code: typeof record.code === "string" ? record.code : void 0,
-    message: typeof record.message === "string" ? record.message : void 0
+    message: typeof record.message === "string" ? record.message : void 0,
+    raw: record
   };
 }
 function defaultCodeForStatus(status) {
@@ -9325,6 +9350,24 @@ var ListSessionEventsEnvelopeSchema = import_zod72.z.object({
 var DeliveryResultEnvelopeSchema = import_zod72.z.object({
   data: import_zod72.z.object({ delivery: SessionDeliveryEnvelopeSchema.nullable() })
 });
+var SessionArtifactsListEnvelopeSchema = import_zod72.z.object({
+  data: import_zod72.z.object({
+    items: import_zod72.z.array(
+      import_zod72.z.object({
+        id: import_zod72.z.string(),
+        artifactId: import_zod72.z.string().optional(),
+        filename: import_zod72.z.string(),
+        path: import_zod72.z.string(),
+        contentType: import_zod72.z.string(),
+        size: import_zod72.z.number(),
+        turnId: import_zod72.z.string().optional(),
+        messageId: import_zod72.z.string().optional()
+      })
+    ),
+    partial: import_zod72.z.boolean().optional(),
+    skippedBundles: import_zod72.z.array(import_zod72.z.object({ artifactId: import_zod72.z.string(), reason: import_zod72.z.string() })).optional()
+  })
+});
 var SessionsResource = class {
   constructor(client) {
     this.client = client;
@@ -9664,6 +9707,72 @@ var SessionsResource = class {
     }
     return parsed.data.data;
   }
+  /**
+   * `GET /api/sessions/:id/artifacts` — the session's deliverable files as
+   * packed by the worker (one zip bundle per turn; #1814 mounts this on the
+   * control-plane too). Requires scope `runs:stream`.
+   *
+   * `mode: "incremental"` (default) returns the files of `turnId`'s bundle
+   * (all bundles when `turnId` is omitted); `mode: "cumulative"` returns the
+   * last-write-wins accumulation up to `turnId`. A bundle that violates the
+   * read limits fails with 422 `ARTIFACT_BUNDLE_UNREADABLE` whose body carries
+   * a structured `reason` (`entry_too_large` / `total_too_large` /
+   * `compressed_too_large` / `entry_count`) plus the offending `path` and
+   * `limit` — since #1814 the writer enforces the same caps at pack time, so
+   * a 422 means a bundle from before that invariant, not fresh data.
+   *
+   * The response items deliberately do NOT carry `previewUrl` / `downloadUrl`
+   * (relative BFF paths — useless off-origin and version-fragile): fetch
+   * bytes with {@link getArtifact}.
+   */
+  async listArtifacts(sessionId, options = {}) {
+    const path = `/api/sessions/${encodeURIComponent(sessionId)}/artifacts`;
+    const envelope = await this.client.request(path, {
+      method: "GET",
+      query: {
+        turnId: options.turnId,
+        mode: options.mode
+      },
+      signal: options.signal,
+      cache: "no-store"
+    });
+    const parsed = SessionArtifactsListEnvelopeSchema.safeParse(envelope);
+    if (!parsed.success) {
+      throw new PilotPlatformApiError({
+        status: 0,
+        code: "MALFORMED_PLATFORM_RESPONSE",
+        message: `GET ${path} did not return a {data: {items: [...]}} envelope.`,
+        cause: parsed.error
+      });
+    }
+    return parsed.data.data;
+  }
+  /**
+   * `GET /api/sessions/:id/artifacts/content` — one artifact's bytes as a
+   * `Uint8Array` (decoding is the caller's business; the SDK does not guess).
+   * `path` comes from a {@link listArtifacts} item; pass that item's
+   * `artifactId` when you have it (exact bundle, immune to later-turn
+   * last-write-wins lookups). Requires scope `runs:stream`.
+   *
+   * Throws `PilotPlatformApiError` `NOT_FOUND` (404) for a path the bundle
+   * does not carry, and 422 `ARTIFACT_BUNDLE_UNREADABLE` (with the structured
+   * `reason` of {@link listArtifacts}) when the backing bundle violates the
+   * read limits.
+   */
+  async getArtifact(sessionId, path, options = {}) {
+    const requestPath = `/api/sessions/${encodeURIComponent(sessionId)}/artifacts/content`;
+    const res = await this.client.rawRequest(requestPath, {
+      method: "GET",
+      query: {
+        artifactId: options.artifactId,
+        path,
+        ...options.download ? { download: "1" } : {}
+      },
+      signal: options.signal,
+      cache: "no-store"
+    });
+    return new Uint8Array(await res.arrayBuffer());
+  }
   /**
    * `GET /api/sessions/:id/events/stream` — live SSE chunk stream, the same
    * rendering feed the portal chat consumes (`pilot_coder.chunk` payloads,