@kitman-sh/sdk 0.6.0 → 0.7.0

package/types/packages/sdk/src/loop/define.d.ts

@@ -50,6 +50,13 @@ export type LoopDefinition<In, Out, E> = {
     readonly capabilities: readonly LoopCapability[];
     /** The Secrets the program reads with `Config.Redacted`, and `agentWork` may put into a Step's sandbox. */
     readonly secrets?: readonly string[];
+    /**
+     * The hosts the program calls besides Kitman, or `open` for any; a shared Runner refuses the rest. An `open` Loop
+     * runs only on a Runner with `docker`, or a personal Runner.
+     */
+    readonly network?: {
+        readonly hosts: readonly string[];
+    } | 'open';
     readonly run: (input: In) => Effect.Effect<Out, E, LoopServices>;
     /** Scripts a build runs twice, the second time from the journal; not part of the manifest. */
     readonly checks?: readonly LoopCheck[];

package/types/packages/sdk/src/program/host.d.ts

@@ -5,6 +5,7 @@ import * as Option from 'effect/Option';
 import * as Schema from 'effect/Schema';
 import type { PackageConfig } from '../loop/config';
 import { ManifestInvalid } from '../loop/define';
+import { type ProgramJournal } from './engine';
 /** Asks a bundle for its declarations and check results instead of running a program. */
 export declare const describeFlag = "--kitman-describe";
 export declare const Described: Schema.Union<readonly [Schema.TaggedStruct<"Described", {
@@ -28,6 +29,9 @@ export declare const Described: Schema.Union<readonly [Schema.TaggedStruct<"Desc
         }>>;
         readonly capabilities: Schema.$Array<Schema.Literals<readonly ["agent_work", "ask", "call", "verify", "change_request", "write_back", "post_comment", "create_tasks", "merge_change_request", "publish_release"]>>;
         readonly secrets: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly network: Schema.optionalKey<Schema.Union<readonly [Schema.Struct<{
+            readonly hosts: Schema.$Array<Schema.String>;
+        }>, Schema.Literal<"open">]>>;
     }>>;
     readonly agents: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
     readonly schedules: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
@@ -43,6 +47,24 @@ type SecretsRpc = Pick<Effect.Success<ReturnType<typeof makeRunnerRpcClient>>, '
 export declare const programSecrets: (rpc: SecretsRpc, lease: ProgramLease) => Effect.Effect<Option.Option<never> | Option.Option<{
     readonly [x: string]: string;
 }>, Error | import("effect/rpc/RpcClientError").RpcClientError | import("../../../live/src/rpc/runner-group").RunnerRpcError, never>;
+/** Kitman's API host and the Loop's declared hosts, comma-separated, as the Runner passes them; unset for `open`. */
+export declare const programHostsEnv = "KITMAN_PROGRAM_HOSTS";
+/** `fail` where the Runner sandboxes the program, `warn` where it runs on its owner's host. */
+export declare const undeclaredHostsEnv = "KITMAN_UNDECLARED_HOSTS";
+type Fetch = (resource: string | URL | Request, init?: RequestInit) => Promise<Response>;
+/**
+ * `fetch` limited to `hosts`, redirect hops included. An undeclared host is refused, and fails the Run with its name
+ * whatever the program then reports; under `warn` it is let through, with one warning per host.
+ */
+export declare const networkGuard: (input: {
+    readonly hosts: readonly string[];
+    readonly undeclared: 'fail' | 'warn';
+    readonly fetch: Fetch;
+    readonly warn: (line: string) => void;
+}) => {
+    fetch: Fetch;
+    journal: <Journal extends Pick<ProgramJournal, 'suspend' | 'finish'>>(journal: Journal) => Journal;
+};
 /** The entry of every Package bundle. */
 export declare const runPackage: (config: PackageConfig) => void;
 export {};