@kitman-sh/loops 0.6.0 → 0.7.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kitman-sh/loops",
-  "version": "0.6.0",
+  "version": "0.7.1",
   "type": "module",
   "license": "UNLICENSED",
   "exports": {
@@ -15,7 +15,7 @@
     "types"
   ],
   "dependencies": {
-    "@kitman-sh/sdk": "0.6.0",
+    "@kitman-sh/sdk": "0.7.1",
     "effect": "^4.0.4"
   }
 }

package/types/packages/core/src/agent-sandbox-policy.d.ts

@@ -8,6 +8,8 @@ export declare const AgentSandboxPolicy: Schema.Struct<{
     readonly writablePaths: Schema.$Array<Schema.String>;
     /** `~` is the Runner user's home directory. */
     readonly readDeniedPaths: Schema.$Array<Schema.String>;
+    /** Readable again inside `readDeniedPaths`; a denied path within one stays denied. */
+    readonly readAllowedPaths: Schema.$Array<Schema.String>;
     readonly network: Schema.Union<readonly [Schema.Struct<{
         readonly hosts: Schema.$Array<Schema.String>;
     }>, Schema.Literal<"open">]>;

package/types/packages/core/src/package-declarations.d.ts

@@ -26,6 +26,10 @@ export declare const LoopManifest: Schema.Struct<{
     readonly capabilities: Schema.$Array<Schema.Literals<readonly ["agent_work", "ask", "call", "verify", "change_request", "write_back", "post_comment", "create_tasks", "merge_change_request", "publish_release"]>>;
     /** The names of the Secrets the Loop reads. */
     readonly secrets: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    /** The hosts the program calls besides Kitman, or `open`. */
+    readonly network: Schema.optionalKey<Schema.Union<readonly [Schema.Struct<{
+        readonly hosts: Schema.$Array<Schema.String>;
+    }>, Schema.Literal<"open">]>>;
 }>;
 export type LoopManifest = typeof LoopManifest.Type;
 /** An Agent as a Package declares it, with its instructions already read from the repository. */
@@ -137,6 +141,10 @@ export declare const PackageDeclarations: Schema.Struct<{
         readonly capabilities: Schema.$Array<Schema.Literals<readonly ["agent_work", "ask", "call", "verify", "change_request", "write_back", "post_comment", "create_tasks", "merge_change_request", "publish_release"]>>;
         /** The names of the Secrets the Loop reads. */
         readonly secrets: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        /** The hosts the program calls besides Kitman, or `open`. */
+        readonly network: Schema.optionalKey<Schema.Union<readonly [Schema.Struct<{
+            readonly hosts: Schema.$Array<Schema.String>;
+        }>, Schema.Literal<"open">]>>;
     }>>;
     readonly agents: Schema.$Record<Schema.String, Schema.Struct<{
         readonly extends: Schema.optionalKey<Schema.String>;

package/types/packages/sdk/src/loop/define.d.ts

@@ -50,6 +50,13 @@ export type LoopDefinition<In, Out, E> = {
     readonly capabilities: readonly LoopCapability[];
     /** The Secrets the program reads with `Config.Redacted`, and `agentWork` may put into a Step's sandbox. */
     readonly secrets?: readonly string[];
+    /**
+     * The hosts the program calls besides Kitman, or `open` for any; a shared Runner refuses the rest. An `open` Loop
+     * runs only on a Runner with `docker`, or a personal Runner.
+     */
+    readonly network?: {
+        readonly hosts: readonly string[];
+    } | 'open';
     readonly run: (input: In) => Effect.Effect<Out, E, LoopServices>;
     /** Scripts a build runs twice, the second time from the journal; not part of the manifest. */
     readonly checks?: readonly LoopCheck[];