@love-moon/conductor-sdk 0.9.0 → 0.11.0

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @love-moon/conductor-sdk
 
+## 0.11.0
+
+## 0.10.0
+
+### Minor Changes
+
+- 43c4f87: Runtime health preflight and agent schedule access control. The daemon now
+  advertises positive backend runtime health (`x-conductor-runtime-health`) so the
+  backend can reject task creation with `503 runtime_unavailable` before any
+  timeline activity, and adds `disable_built_in_cli_list` to opt out of built-in
+  SDK backends. The SDK attributes agent-originated scheduled-message calls with
+  `X-Conductor-Actor: agent` so per-task `agent_schedule_access`
+  (full/read_only/blocked) can govern `conductor task schedule` from agents while
+  human/UI calls stay unrestricted.
+
 ## 0.9.0
 
 ### Minor Changes

package/dist/backend/client.js

@@ -1,3 +1,15 @@
+/**
+ * Mark a request as originating from an autonomous agent turn. The daemon
+ * exports `CONDUCTOR_LAUNCHED_BY_DAEMON=1` into the fire process (and the shell
+ * commands it runs), so any scheduling call made while the AI is driving the
+ * turn is attributed to the agent. The backend uses this to enforce the
+ * per-task agent schedule access level; ordinary human/app calls omit it and
+ * are never restricted.
+ */
+function agentActorHeaders() {
+    const launchedByDaemon = typeof process !== 'undefined' && process.env?.CONDUCTOR_LAUNCHED_BY_DAEMON === '1';
+    return launchedByDaemon ? { 'X-Conductor-Actor': 'agent' } : {};
+}
 export class BackendApiError extends Error {
     statusCode;
     details;
@@ -463,7 +475,9 @@ export class BackendApiClient {
         return this.parseJson(response);
     }
     async listScheduledMessages(taskId) {
-        const response = await this.request('GET', `/tasks/${taskId}/scheduled-messages`);
+        const response = await this.request('GET', `/tasks/${taskId}/scheduled-messages`, {
+            headers: agentActorHeaders(),
+        });
         const payload = await this.parseJson(response);
         if (payload && typeof payload === 'object' && Array.isArray(payload.schedules)) {
             return payload.schedules;
@@ -476,22 +490,25 @@ export class BackendApiClient {
     async createScheduledMessage(taskId, params) {
         const response = await this.request('POST', `/tasks/${taskId}/scheduled-messages`, {
             body: JSON.stringify(params),
+            headers: agentActorHeaders(),
         });
         return this.parseJson(response);
     }
     async deleteScheduledMessage(taskId, scheduleId) {
-        await this.request('DELETE', `/tasks/${taskId}/scheduled-messages/${scheduleId}`);
+        await this.request('DELETE', `/tasks/${taskId}/scheduled-messages/${scheduleId}`, {
+            headers: agentActorHeaders(),
+        });
     }
     async request(method, pathname, opts = {}) {
         const url = this.buildUrl(pathname, opts.query);
         const controller = typeof AbortController !== 'undefined' ? new AbortController() : null;
         const timeout = controller ? setTimeout(() => controller.abort(), this.timeoutMs) : null;
         try {
-            let response = await this.sendRequest(url, method, opts.body, controller);
+            let response = await this.sendRequest(url, method, opts.body, controller, opts.headers);
             if (response.status === 404 &&
                 this.shouldRetryWithApiPrefix(pathname, url)) {
                 const retryUrl = this.buildUrl(this.withApiPrefix(pathname), opts.query);
-                response = await this.sendRequest(retryUrl, method, opts.body, controller);
+                response = await this.sendRequest(retryUrl, method, opts.body, controller, opts.headers);
             }
             if (!response.ok) {
                 const details = await this.safeJson(response);
@@ -518,13 +535,14 @@ export class BackendApiClient {
         }
         return url;
     }
-    async sendRequest(url, method, body, controller) {
+    async sendRequest(url, method, body, controller, extraHeaders) {
         return this.fetchImpl(url.toString(), {
             method,
             headers: {
                 Authorization: `Bearer ${this.config.agentToken}`,
                 Accept: 'application/json',
                 ...(body ? { 'Content-Type': 'application/json' } : {}),
+                ...(extraHeaders ?? {}),
             },
             body,
             signal: controller?.signal,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@love-moon/conductor-sdk",
-  "version": "0.9.0",
+  "version": "0.11.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/lovemoon-ai/conductor.git"
@@ -33,5 +33,5 @@
     "typescript": "^5.6.3",
     "vitest": "^2.1.4"
   },
-  "gitCommitId": "606e5a6"
+  "gitCommitId": "7d57852"
 }