@mccaskie-labs/workbench-config 0.4.0 → 0.4.1

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @mccaskie-labs/workbench-config
 
+## 0.4.1
+
+### Patch Changes
+
+- The `intake` manifest lists Control's new `cf_r2_bucket_create` and `cf_r2_bucket_delete` tools and the `new_project` choice that makes the project's `INTAKE_STORE` bucket.
+
 ## 0.4.0
 
 ### Minor Changes

package/capabilities/intake.json

@@ -13,6 +13,10 @@
     "gateway": [
       "POST /v1/intake/read"
     ],
+    "tools": [
+      "cf_r2_bucket_create",
+      "cf_r2_bucket_delete"
+    ],
     "package": [
       "Ai.intake",
       "defineIntakeTypes",
@@ -32,6 +36,10 @@
       "description": "Project key with the ai scope, delivered as a Worker secret by gw_key_issue"
     }
   ],
+  "actions": [
+    { "tool": "cf_r2_bucket_create", "gate": "free", "ships": "later" },
+    { "tool": "cf_r2_bucket_delete", "gate": "two_step", "ships": "later" }
+  ],
   "limits": [
     { "id": "intake.types-per-call", "value": 20, "unit": "types", "per": "request", "enforced_by": "gateway", "refusal": "invalid_request" },
     { "id": "intake.properties-per-type", "value": 40, "unit": "properties", "per": "type", "enforced_by": "gateway", "refusal": "invalid_request" },
@@ -168,7 +176,7 @@
           { "label": "Yes, in your own storage", "value": "project", "means": "Your app keeps the screenshot and text in its own private bucket. Workbench never keeps it." }
         ],
         "must_ask": true,
-        "note": "project sets save_input in workbench/intake.json and needs the INTAKE_STORE bucket bound to the app (a private R2 bucket <id>-intake per environment, in the projects account). Pass store: env.INTAKE_STORE on every call. Say who will be able to see the copies and for how long."
+        "note": "project sets save_input in workbench/intake.json and needs the INTAKE_STORE bucket bound to the app: a private R2 bucket per environment (<id>-intake-staging, <id>-intake-production), made by new_project when its intake choice is yes, or by Workbench Control's cf_r2_bucket_create (use intake) for each environment, whose result gives the wrangler.jsonc binding. Pass store: env.INTAKE_STORE on every call. Say who will be able to see the copies and for how long."
       },
       {
         "id": "intake.check",

package/dist/capabilities.gen.d.ts

@@ -1,4 +1,4 @@
-export declare const MANIFEST_VERSION: "7ad8cef4de58";
+export declare const MANIFEST_VERSION: "0d881b725675";
 export declare const capabilities: {
     readonly ai: {
         readonly $schema: "./schema.json";
@@ -2904,6 +2904,7 @@ export declare const capabilities: {
         readonly status: "built";
         readonly surfaces: {
             readonly gateway: readonly ["POST /v1/intake/read"];
+            readonly tools: readonly ["cf_r2_bucket_create", "cf_r2_bucket_delete"];
             readonly package: readonly ["Ai.intake", "defineIntakeTypes", "IntakeTypes", "IntakeResult"];
         };
         readonly config: readonly [{
@@ -2963,6 +2964,15 @@ export declare const capabilities: {
             readonly enforced_by: "gateway";
             readonly refusal: "invalid_request";
         }];
+        readonly actions: readonly [{
+            readonly tool: "cf_r2_bucket_create";
+            readonly gate: "free";
+            readonly ships: "later";
+        }, {
+            readonly tool: "cf_r2_bucket_delete";
+            readonly gate: "two_step";
+            readonly ships: "later";
+        }];
         readonly errors: readonly [{
             readonly code: "invalid_request";
             readonly http: 400;
@@ -3134,7 +3144,7 @@ export declare const capabilities: {
                     readonly means: "Your app keeps the screenshot and text in its own private bucket. Workbench never keeps it.";
                 }];
                 readonly must_ask: true;
-                readonly note: "project sets save_input in workbench/intake.json and needs the INTAKE_STORE bucket bound to the app (a private R2 bucket <id>-intake per environment, in the projects account). Pass store: env.INTAKE_STORE on every call. Say who will be able to see the copies and for how long.";
+                readonly note: "project sets save_input in workbench/intake.json and needs the INTAKE_STORE bucket bound to the app: a private R2 bucket per environment (<id>-intake-staging, <id>-intake-production), made by new_project when its intake choice is yes, or by Workbench Control's cf_r2_bucket_create (use intake) for each environment, whose result gives the wrangler.jsonc binding. Pass store: env.INTAKE_STORE on every call. Say who will be able to see the copies and for how long.";
             }, {
                 readonly id: "intake.check";
                 readonly sets: "app.when_unsure";

package/dist/capabilities.gen.js

@@ -1,6 +1,6 @@
 // Generated by `npm run capabilities:build` from capabilities/*.json. Do not edit.
 // check:capabilities fails in Checks when this file is stale.
-export const MANIFEST_VERSION = "7ad8cef4de58";
+export const MANIFEST_VERSION = "0d881b725675";
 export const capabilities = {
     "ai": {
         "$schema": "./schema.json",
@@ -3810,6 +3810,10 @@ export const capabilities = {
             "gateway": [
                 "POST /v1/intake/read"
             ],
+            "tools": [
+                "cf_r2_bucket_create",
+                "cf_r2_bucket_delete"
+            ],
             "package": [
                 "Ai.intake",
                 "defineIntakeTypes",
@@ -3887,6 +3891,18 @@ export const capabilities = {
                 "refusal": "invalid_request"
             }
         ],
+        "actions": [
+            {
+                "tool": "cf_r2_bucket_create",
+                "gate": "free",
+                "ships": "later"
+            },
+            {
+                "tool": "cf_r2_bucket_delete",
+                "gate": "two_step",
+                "ships": "later"
+            }
+        ],
         "errors": [
             {
                 "code": "invalid_request",
@@ -4096,7 +4112,7 @@ export const capabilities = {
                         }
                     ],
                     "must_ask": true,
-                    "note": "project sets save_input in workbench/intake.json and needs the INTAKE_STORE bucket bound to the app (a private R2 bucket <id>-intake per environment, in the projects account). Pass store: env.INTAKE_STORE on every call. Say who will be able to see the copies and for how long."
+                    "note": "project sets save_input in workbench/intake.json and needs the INTAKE_STORE bucket bound to the app: a private R2 bucket per environment (<id>-intake-staging, <id>-intake-production), made by new_project when its intake choice is yes, or by Workbench Control's cf_r2_bucket_create (use intake) for each environment, whose result gives the wrangler.jsonc binding. Pass store: env.INTAKE_STORE on every call. Say who will be able to see the copies and for how long."
                 },
                 {
                     "id": "intake.check",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mccaskie-labs/workbench-config",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "Workbench app configuration: WORKBENCH_ENV, typed variables that fail by name, secrets that are never printed, and the capabilities manifest.",
   "license": "UNLICENSED",
   "type": "module",